The access log has a residency too

The audit trail is personal data. It holds IP addresses, timestamps, and paths, and on a regulated product it is itself in scope for the residency clause. Most teams discover this when the reviewer asks where the logging vendor is.

On Hoody the proxy captures request and response logs into a logs service that runs on your own server. Query them at the logs URL on your box, filtered by container, method, and level, or tail them live. They sit in SQLite on the same disk as the workloads they describe. No forwarder ships them to a SaaS in another jurisdiction, and no retention window is somebody else's default.

When the reviewer asks where the logs live, the answer is the same as where the app lives, because it is the same machine.

The evidence stays in the jurisdiction of the thing it's evidence about.